password validation (in progress)
User has secure password added to user.rb